PT-2025-52169 · Fantasticplugins+1 · Abandoned Cart Recovery For Woocommerce+1

Denver Jackson · Published 2025-12-18 · Updated 2025-12-18 · CVE-2025-64222

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions FantasticPlugins WooCommerce Recover Abandoned Cart versions through 24.6.0

Description An authorization issue exists in FantasticPlugins WooCommerce Recover Abandoned Cart. The issue involves incorrectly configured access control security levels, potentially allowing unauthorized access.

Recommendations Update FantasticPlugins WooCommerce Recover Abandoned Cart to a version later than 24.6.0.

Fix

Missing Authorization

Weakness Enumeration

CWE-862

Related Identifiers

CVE-2025-64222

Affected Products

Woocommerce

Abandoned Cart Recovery For Woocommerce

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2025-64222 · Security Note
• https://vdp.patchstack.com/database/Wordpress/Plugin/rac/vulnerability/wordpress-woocommerce-recover-abandoned-cart-plugin-24-6-0-arbitrary-content-deletion-vulnerability?_s_id=cve · Note
• https://patchstack.com/database/Wordpress/Plugin/rac/vulnerability/wordpress-woocommerce-recover-abandoned-cart-plugin-24-6-0-arbitrary-content-deletion-vulnerability?_s_id=cve · Note
• https://twitter.com/CVEnew/status/2001736586069778502 · Twitter Post